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Top Stories 

• Otter Tail Power Company officials announced that the Coyote Station near Beulah, North 
Dakota, is closed until they can assess the amount of damage from a December 4 fire 
caused by a major mechanical failure at the plant. - Bismarck Tribune (See item 1) 

• A Haverhill, Massachusetts man pleaded guilty to charges December 4 in connection to a 
scheme were he created fake prescriptions in order to obtain and distribute more than 
10,000 oxycodone pills from 2012 to 2014. - Waltham Daily News Tribune (See item 17) 

• A December 5 fire at an Augusta, Maine apartment building rendered the structure a total 
loss and prompted the rescue of at least 23 residents while 7 others were transported to an 
area hospital for minor injuries. - WMTW 8 Poland Spring (See item 33) 

• Seven businesses at the Cove Shopping Center in Marin County, California, were closed 
December 4 due to flooding caused by an equipment failure at the county’s pumping 
station during heavy rains December 3. - KGO 7 San Francisco (See item 34) 
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Energy Sector 



1. December 4, Bismarck Tribune - (North Dakota) Mechanical failure shuts down 
power plant. Otter Tail Power Company energy officials announced that the Coyote 
Station near Beulah, North Dakota, is closed until they can assess the amount of 
damage from a December 4 fire caused by a major mechanical failure at the plant. 
Authorities determined that one of the power plant’s turbine-driven boiler pumps 
suffered a mechanical failure which prompted oil lines to rupture, causing a fire. 
Source: http://bismarcktribune.com/news/state-and-regional/rnechanical-failure-shuts- 
down-power-plant/article 339b4092-7be8-lle4-bb8a-cb4d843b92d7.html 

For additional stories, see items 6 and 9 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. December 4, Detroit News - (National) Mazda expands Takata air bag recall by 
40,000 vehicles. Mazda announced December 4 that it is expanding a recall of vehicles 
in high-humidity States to include 40,000 vehicles registered in Alabama, Georgia, 
Louisiana, Mississippi, and Texas due to the vehicles being equipped with airbags 
manufactured by Takata that can explode upon deployment and spray the passenger 
compartment with shrapnel. Ford and Chrysler also announced additions to previous 
recalls for the Takata airbags December 3, expanding their recalls by 149,150 vehicles 
and 13,000 vehicles, respectively. 

Source: http://www.detroitnews.com/storv/business/autos/foreign/2014/12/04/mazda- 
expands-takata-air-bag-recall- vehicles/1 9904197/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. December 4, WPLG 10 Miami - (Florida) 4 Miami residents accused of bank fraud 
arrested. Four individuals from Miami, Florida, were arrested December 4 on charges 
that they allegedly operated a bank fraud and payment card fraud operation that 
defrauded financial institutions of more than $100,000. 

Source: http://www.locall0.com/news/4-miami-residents-accused-of-bank-fraud- 
arrested/30055 104 

4. December 3, KCBS 2 Los Angeles - (California) 2 O.C. residents charged in $11M 
Ponzi scheme. The Orange County-based owner and operator of MBP Insurance 
Services Inc., and an agent at the company were charged December 3 for allegedly 
operating the company as a Ponzi scheme that defrauded victims of more than $1 1.3 
million. 

Source: http://losangeles.cbslocal.com/2014/12/03/2-o-c-residents-charged-in-llm- 
ponzi- scheme/ 

5. December 3, Lexington Dispatch - (North Carolina; Alabama) Striped hoodie bandit 
arrested in Huntsville, Ala., on Tuesday. A suspect known as the “Striped Hoodie 
Bandit” wanted for three bank robberies in North Carolina was arrested in Huntsville, 
Alabama, December 2. The suspect was wanted in connection to bank robberies in 
High Point, Asheboro, and Huntersville in North Carolina as well as for a convenience 
store robbery in the State. 

Source: http://www.the- 

dispatch.com/article/20141203/NEWS/312039992/1005?Title=Striped-hoodie-bandit- 

arrested-in-Huntsville-Ala-on-Tuesday&tc=ar 

For additional stories, see items 25 and 32 
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Transportation Systems Sector 

6. December 5, WBMA 58 Birmingham - (Alabama) Overnight lane closures continue 
from 1-59 tanker spill. All but one lane of Interstate 59 in Etowah County reopened to 
traffic December 5 with one southbound lane expected to be closed for continued 
cleanup after a semi-truck carrying 8,000 gallons of gasoline overturned December 4, 
spilling fuel and prompting authorities to close the highway. 

Source: http://www.abc3340.com/storv/27554006/overnight-lane-closures-continue- 
from-i-59-tanker-spill 

7. December 5, Associated Press - (Ohio) Plane from Detroit makes emergency 
landing in Ohio. A Delta Airlines flight from Detroit to Fort Lauderdale, Florida, 
made an emergency landing in Toledo, Ohio, December 4 when a smoky odor was 
detected in the flight deck. The plane landed without incident and passengers were 
transferred onto a new flight. 

Source: 
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http://www.lansingstateiournal.com/storv/news/local/michigan/2014/12/05/plane- 

detroit-makes-emergency-landing-ohio/19939027/ 

8. December 4, KREM 2 Spokane - (Washington) Fatal crash closes 395 and Jump Off 
Joe Road. One man was killed following a head-on collision between a semi-truck and 
a passenger vehicle on Highway 395 in Stevens County that prompted authorities to 
shut down the road in both directions for several hours December 4. 

Source: http://www.krern.com/storv/news/local/spokane-county/2014/12/04/fatal- 
crash-closes-395-and-iump-off-ioe-road/19901065/ 

9. December 4, New Orleans Times-Picayune - (Louisiana) Traffic gridlocks New 
Orleans CBD, Warehouse District even as most I- 10 lanes reopen. A single- vehicle 
accident on Interstate 10 in New Orleans December 4 shut down the highway in both 
directions with westbound lanes opening 5 hours after a semi-truck heading east 
crashed into the median and spilled about 100 gallons of diesel fuel before catching 
fire. 

Source: 

http://www.nola.com/traffic/index.ssf/2014/12/dump truck crash spills 100 ga.html 
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Food and Agriculture Sector 

10. December 5, U.S. Department of Agriculture - (International) Nebraska firm recalls 
pork belly product produced without import inspection. The Food Safety and 
Inspection Service (FSIS) announced December 4 that Quality Meats, Inc., recalled 
about 44,372 pounds of Frozen Pork Single Ribbed Bellies products because they were 
not provided the benefit of a full FSIS import inspection after they were not presented 
at the border for examination. The affected products were imported from Ireland and 
sent to retailers and distributors in Georgia, Illinois, and Washington. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-083-20 14-release 

11. December 4, U.S. Food and Drug Administration - (National) Abdallah Candies 
announces the voluntary recall of Holiday Caramel Bites. The U.S. Food and Drug 
Administration reported December 4 that Abdallah Candies voluntarily issued a 
nationwide recall for certain packages of its Holiday Caramel Bites due to the 
possibility of undeclared peanuts caused by mislabeling. The recall was initiated after a 
consumer reported finding a peanut butter bite candy inside a Holiday Caramel Bites 
package. 

Source: http://www.fda.gov/Safety/Recalls/ucm425823.htm 

12. December 2, Janesville Gazette - (Wisconsin) Grain elevator fire challenges 
Wisconsin firefighters. A DeLong Company-owned grain elevator in Sharon, 
Wisconsin, suffered more than $100,000 in damage following a December 2 fire that 
broke out in a 20,000-bushel bin holding wet corn. Firefighters declared the bin 
unsound and crews were brought in to aid with salvage and recovery efforts. 
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Source: http://www.firehouse.com/news/11785694/grain-elevator-fire-challenges- 
sharon-wisconsin-firefighters 



T Return to top i 

Water and Wastewater Systems Sector 

13. December 4, KGW 8 Portland - (Oregon) Heavy rain causes sewer overflow into 
Willamette River. The Portland Bureau of Environmental Services issued a combined 
sewer overflow advisory recommending the public should avoid contact with the 
Willamette River from the Morrison Bridge to the Columbia River near Kelley Point 
Park following a sewer overflow that resulted from heavy rain December 4. 

Source: http://www.kgw.com/story/news/local/2014/12/04/sewer-overflow-into- 
willamette-river/19917931/ 

14. December 4, KYW 3 Philadelphia - (Pennsylvania) Tredyffrin Twp. agrees to costly 
settlement in Valley Forge water pollution case. Tredyffrin Township agreed in a 
settlement with the Pennsylvania Department of Environmental Protection to replace 
aging sewage pipeline that ruptured several times in recent years, spilling millions of 
gallons of untreated sewage into the Valley Forge National Park and Valley Creek. The 
settlement includes a penalty of $1 10,000 against the township. 

Source: http://philadelphia.cbslocal.com/2014/12/04/tredyffrin-twp-agrees-to-costly- 
settlement-in-valley-forge-water-pollution-case/ 

15. December 4, WMAR 2 Baltimore - (Maryland) Water main break affecting 500 
Baltimore apartments. Crews worked overnight December 3 to repair a 6-inch water 
main break in Baltimore that affected approximately 500 apartment units and a Johns 
Hopkins University residence hall. 

Source: http://www.abc2news.com/news/region/baltimore-city/water-main-break- 
affecting-500-baltimore-apartments 
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Healthcare and Public Health Sector 

16. December 5, Help Net Security - (National) Health insurance online threats 
revealed. RisklQ researchers found that Web sites hosted by third party code libraries, 
external providers, and excessive mobile app permissions represent the largest risk to 
users of health insurance Web and mobile self-service tools now that providers are 
investing in Web and mobile app infrastructures to establish new customer touch 
points. 

Source: http://www.net-securitv.org/secworld.php?id=17718 

17. December 4, Waltham Daily News Tribune - (Massachusetts) Man charged in 
connection with alleged Waltham credit card fraud. A Haverhill man pleaded guilty 
to charges December 4 in connection to a scheme were he created hundreds of fake 
prescriptions in order to obtain and distribute more than 10,000 oxycodone pills after 
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allegedly stealing prescription paper and using the names of physicians and 
authorization numbers to create the fraudulent documents from 2012 to 2014. The 
suspect and an accomplice employed at the Copper House Tavern in Waltham also 
stole customer’s credit card information and opened fraudulent credit cards. 

Source: http://waltham.wickedlocal.com/article/20 141 204/NEW S/141 208245 

18. December 3, Long Island Newsday - (New York) DA: Great Neck doctor stole 
patient information from computer system. A Great Neck doctor was arrested and 
charged December 3 for allegedly stealing the personal and health information of 
nearly 97,000 patients while he worked at Garden City-based NRAD Medical 
Associates by improperly accessing the computer system between January and April. 
Patients were notified of the breach in June. 

Source: http://www.newsdav.com/long-island/nassau/da-great-neck-doctor-faces- 
charges-he-stole-patient-information- 1 .967 8047 
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Government Facilities Sector 

19. December 5, Baltimore Sun - (Maryland) Kenwood High School evacuated after 
bomb threat, device found outside of school. An emailed bomb threat December 4 
prompted officials to evacuate and dismiss classes at Kenwood High School in 
Baltimore County December 5 after a device was found outside the building. 

Source: http://www.baltimoresun.com/news/marvland/baltimore-county/essex/bs-md- 
co-kenwood-bomb-threat-20 141 205-story.html 

20. December 5, Iowa City Press-Citizen - (Iowa) School bus crash near Solon kills 1. 
One person was killed and 5 others were injured, including 4 students, in an accident 
involving a Solon Community School District bus that collided with a car near Iowa 
Highway 382 west of Solon December 4. 

Source: http://www.desmoinesregister.com/story/news/education/k- 
1 2/2014/1 2/04/solon-school-bus-accident-highway-382/l 9904677/ 

21. December 4, Great Falls Tribune; Associated Press - (Montana) 2 injured in MSU 
dorm explosion. A December 4 explosion at Montana State University’s Langford 
Hall dormitory in Bozeman left two students injured and caused structural damage to 
several rooms on the third floor. Students were temporarily evacuated and authorities 
determined the explosion was set off by an aerosol product that was sprayed in the air 
and ignited with a lighter. 

Source: http://www.greatfallstribune.com/storv/news/local/2014/12/05/iniured-msu- 
dorm-explosion/ 1 9934405/ 

22. December 4, KSDK 5 St. Louis - (Missouri) Suspected CO leak sends kids to 
hospital. Crews aired out Earl Nance Elementary School in St. Louis following a 
suspected carbon monoxide leak that caused three students to be transported to an area 
hospital with symptoms December 4. The school was evacuated and reopened once 
officials cleared the scene and determined that the carbon monoxide may have 
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originated from the exhaust of a boiler. 

Source: http://www.ksdk.com/story/news/local/2014/12/04/carbon-monoxide-leak-earl- 
nance-elementar y/ 19885837/ 

23. December 4, U-T San Diego - (California) Fire at SDSU chiller plant causes $300K 
in damage. A December 3 fire at an air conditioning plant at San Diego State 
University in California caused $200,000 in damage to the building and $100,000 in 
damage to its contents after scaffolding and construction materials were destroyed in 
the fire. 

Source: http://www.utsandiego.com/news/2014/dec/04/fire-chiller-plant-sdsu-3Q0k- 
damage/ 

For additional stories, see items 14 and 15 
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Emergency Services Sector 

24. December 4, Los Angeles Times - (Ohio) Cleveland police use ‘unnecessary’ force, 
Justice Department finds. The U.S. Department of Justice released the results of an 
investigation December 4 which determined that Cleveland police routinely engage in 
“unreasonable and unnecessary” force, and that there is cause to believe that officers 
engage in a pattern or practice of unreasonable force in violation of the U.S. 
Constitution due to organizational deficiencies. 

Source: http://www.latimes.com/nation/la-na-cleveland-police-probe-2014 1204- 
story .html 
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Information Technology Sector 

25. December 5, The Register - (International) ‘Sign in with Linkedln’ spoof allows 
baddies to penetrate Slashdot, NASDAQ.com and more. Researchers with IBM 
identified and reported a vulnerability that could have allowed attackers to gain access 
to Web sites that use MyDigiPass to enable logins using social media accounts due to 
Linkedln and Amazon allowing the use of accounts without confirmed email addresses. 
The issue was closed before the findings were disclosed and affected Web sites 
including NASDAQ.com, Slashdot, Crowdfunder, and among many others. 

Source: 

http://www.theregister.co.uk/2014/12/05/top sites massive potential security flaw hi 
ghlighted/ 

26. December 5, The Register - (International) VMware warns of vCenter cross-site- 
scripting bug. VMware released six patches for vulnerabilities in its vCenter Server 
Appliance, one of which could allow cross-site scripting (XSS) attacks if a user is 
logged-in to vCenter and is tricked into clicking a malicious link or visiting a malicious 
Web page. 
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Source: 

http://www.theregister.co.uk/2014/12/05/vmware warns of vcenter crosssitescripting 
bug/ 

27. December 4, Dark Reading - (International) ‘DeathRing’ malware found pre- 
installed on smartphones. Researchers with Lookout published a report that found that 
low-cost and counterfeit smartphones manufactured in Asia and Africa that come with 

a piece of pre-loaded malware known as DeathRing originates from China. The 
command and control server for the malware appears to be offline, and the malware 
could be used for SMS or browser phishing. 

Source: http://www.darkreading.com/mobile/deathring-malware-found-pre-installed- 
on-smartphones/d/d-id/1317901 

28. December 4, Threatpost - (International) Details emerge on Sony wiper malware 
Destover. Kaspersky Lab researchers released a report analyzing the Destover wiper 
malware used in the recent attack on Sony Pictures Entertainment and stated that the 
malware appeared to use similar driver files and to have been developed on a similar 
timeline to the malware used in the Shamoon attack on Saudi Aramco and the 
DarkSeoul attack against South Korea in 2013. 

Source: http://threatpost.com/details-emerge-on-sony-wiper-malware-destover/109727 

29. December 4, Threatpost - (International) Critical remote code execution flaw found 
in WordPress plugin. Researchers with Sucuri identified and reported a vulnerability 
in the WP Download Manager plugin for WordPress that could have allowed attackers 
to implant a backdoor or gain access to administrative accounts on vulnerable Web 
sites. The developers of WP Download Manager released an update to close the 
vulnerability the week of December 1. 

Source: http://threatpost.com/critical-remote-code-execution-flaw-found-in-wordpress- 
plu gin/ 1097 20 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. December 4, Morganton News Herald - (North Carolina) Radio station offline after 
copper theft wrecks transmitters. WCIS 760 AM Morganton, a radio station covering 
7 counties across North Carolina, was knocked off the air after thieves damaged its 
transmitter building in Burke County December 4 stealing between 80 and 200 pounds 
of copper and causing an estimated $50,000 to $60,000 worth of property damage. The 
station is expected to resume operations the week of December 8. 
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Source: http://www.morganton.com/news/radio-station-offline-after-copper-theft- 
wrecks-transmitters/article 071d2412-7bf8-lle4-907c-af37597c4c49.html 



31. December 4, Bluefielcl Daily Telegraph - (West Virginia) Police probe copper theft. 
Authorities are searching for suspects responsible for disrupting landline phone service 
to residents in the Davy area of McDowell County December 3 after an estimated 2,500 
feet of Frontier Communications’ copper cables were stolen. 

Source: http://www.bdtonline.com/news/police-probe-copper-theft/article 977ael92- 
7b59-lle4-9539-d788ce4e7e47.html 
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Commercial Facilities Sector 

32. December 5, Krebs on Security - (International) Bebe stores confirms credit card 
breach. Officials from bebe stores inc., warned consumers December 4 that their 
personal information, including payment card data, may have been compromised after 
an investigation confirmed that hackers breached the company’s payment systems at 
stores in the U.S., Puerto Rico, and U.S. Virgin Islands between November 8 and 
November 26. The company has since blocked the attack and has added additional 
security features to its networks. 

Source: http://krebsonsecuritv.com/2014/12/bebe-stores-confirms-credit-card-breach/ 

33. December 5, WMTW 8 Poland Spring - (Maine) More than 20 rescued from Augusta 
apartment building fire. A December 5 fire at an 18-unit apartment building in 
Augusta, Maine, caused a partial building collapse and rendered the structure a total 
loss. At least 23 residents were rescued from the building, and at least 7 residents were 
transported to an area hospital for minor injuries and smoke inhalation. 

Source: http://www.wmtw.com/news/fire-crews-fight-augusta-apartment-fire/3007160Q 

34. December 4, KGO 7 San Francisco - (California) Cleanup underway after storm 
rocked Bay Area. Seven businesses at the Cove Shopping Center in Marin County 
were closed December 4 due to flooding caused by an equipment failure at the county’s 
pumping station during heavy rains December 3. Businesses in the Mission District of 
the county also suffered flood damage caused by the heavy rains and a water main 
rupture. 

Source: http://abc7news.com/weather/cleanup-underwav-after-storm-rocked-bay-area- 
Z422889/ 

35. December 4, KOMO 4 Seattle - (Washington) Stolen car careens into Seattle 
daycare, bursts into flames. Seattle police are searching for three suspects who fled 
the scene after they crashed a stolen vehicle into the Kindercare daycare center 
December 4 prompting the center to close indefinitely while crews repair the building. 
Several apartment units located above the center were evacuated due to the incident. 
Source: http://www.komonews.com/news/local/Car-careens-into-Seattle-daycare- 
bursts-into-flames-2847461 1 1 .html 
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36. December 4, KTVI 2 St. Louis - (Missouri) Red Cross helping people find shelter 
after huge Affton apartment fire. Residents from 24 units at the Wedgewood 
Apartments complex in Affton were temporarily displaced following a 2-alarm fire 
December 4. Officials are investigating the cause of the fire that is believed to have 
started in an apartment unit when no one was home. 

Source: http://fox2now.com/2014/12/04/st-louis-bomb-and-arson-squad-investigates- 
huge-affton-apartment-fire/ 

37. December 4, KNBC 4 Los Angeles - (California) Fire guts mattress warehouse in 
Paramount, collapsing roof. Authorities are investigating the source of a 2-alarm fire 
that caused a roof collapse at the AC Mattress Manufacturing warehouse in Paramount 
and gutted the building December 4. Crews temporarily cut off power to nearby 
businesses while they battled the blaze. 

Source: http://www.nbclosangeles.com/news/local/Fire-Guts-Mattress-Store-in-Los- 
Angeles-28472323 1 .html 

38. December 4, Central Valley Business Times - (California) Fire damages Modesto 
business. The West Side Market in Modesto suffered an estimated $500,000 in damage 
following a 2-alarm fire December 4 that gutted the store. The fire is believed to be 
accidental in nature and was contained to the structure’s interior. 

Source: http://www.centralvallevbusinesstimes.com/stories/001/?ID=27284 

For another story, see item 15 
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Dams Sector 

Nothing to report 



T Return to top i 



- 10 - 




NTAS 

A^viwfT 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 
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